QA Rating

NetSPI

NetSPI is an independent testing company founded in 2001, headquartered in Minneapolis, the USA, with 501-1000 people. It offers Penetration testing, Security testing, Red teaming, Secure code review, Attack surface management. Certificates confirmed by a register entry: CREST. It publishes no rate card. Data checked on September 2, 2026.
Profile checkedSeptember 2, 202614 sourceswww.netspi.com

Best suited for

  • Security focus

    NetSPI offers Penetration testing, Security testing, Red teaming, Secure code review, Attack surface management; holds CREST, each confirmed by a register entry or the certificate itself; publishes 2 case studies.

    Security testing is offered, together with either penetration testing or a verified ISO/IEC 27001 certificate, and at least one published case study.

  • Nearshore for the USA

    NetSPI delivers from the USA, Canada, the UK, India.

    At least one delivery location in Canada, Mexico, Central America or South America.

Facts

Comparable facts about NetSPI. Every field is shown, including the ones the company has not published.
HeadquartersMinneapolis, the USA
Delivery locationsthe USA, Canada, the UK, India
Team size501-1000 people
Founded2001
OwnershipIndependent
ServicesPenetration testing, Security testing, Red teaming, Secure code review, Attack surface management
IndustriesBanking, Healthcare, Insurance
FrameworksNot published
Engagement modelsManaged testing service, Continuous testing program
Client stagesNot published
CertificatesCRESTregister entry
Signs a BAA / GDPR DPANot confirmed / Not confirmed
Published ratesNot published
Minimum projectNot published
OnboardingNot published
Crowd tester poolNot published
Device labNot published

Certificates the company claims

SOC 2claimedcompany pageCyber Essentialsclaimedcompany page

These certificates are not confirmed by a registry entry, a certificate document or an auditor report. Each one is what the company says about itself on the page linked beside it, read on the date shown there. They are listed apart from confirmed certificates and are not counted anywhere the catalog counts certificates: not in the rankings tables, not in the applicability tags, not in comparisons.

Reviews on external platforms

  • G24.9 out of 5, 11 reviewstaken on September 2, 2026

This catalog collects no reviews of its own. Review counts and scores are aggregates from external platforms, shown with the date they were read.

Named clients

Rankings this company appears in

Compared with

Sources

  1. NetSPI: homepage (Proactive Cyber Security | PTaaS, ASM, BAS)Checked on September 2, 2026. States client mix: major cloud providers, top U.S. banks, healthcare companies, technology companies, cyber insurance providers.
  2. NetSPI | LinkedIn: company pageChecked on September 2, 2026. Company size 501-1,000 employees, headquarters 241 5th Ave N, Suite 1200, Minneapolis, Minnesota 55401, US, founded 2001, industry Computer and Network Security.
  3. NetSPI: CREST Marketplace member profile (accreditation registry)Checked on September 2, 2026. CREST's own directory entry: active member of 10 years, accreditations for Penetration Testing and Threat Led Penetration Testing (formerly STAR ILPT), geographic coverage Europe and North America.
  4. NetSPI: Penetration Testing as a Service (PTaaS) overviewChecked on September 2, 2026. Lists application, network, cloud, hardware/embedded, mainframe, and AI/LLM pentesting plus red team, social engineering, secure code review, threat modeling, detective controls testing and cybersecurity maturity assessment. Describes continuous pentesting, point-in-time testing and a subscription-based platform.
  5. The NetSPI Platform - Penetration Testing as a Service (PTaaS) Reviews | G2Checked on September 2, 2026. Direct fetch returned HTTP 403; rating/count corroborated across multiple independently indexed G2 pages for this product and related solution pages (search result titles read 'Read 11 Reviews on G2'; snippet states 4.9 out of 5 stars, 11 reviews, 90% 5-star / 9% 4-star).
  6. NetSPI Raises $410 Million in Growth Funding from KKR: press release (PR Newswire)Checked on September 2, 2026. Confirms growth-equity investment (not an acquisition) from KKR and Ten Eleven Ventures; describes NetSPI as headquartered in Minneapolis, MN, with global offices across the U.S., Canada, the UK, and India.
  7. Trust - NetSPI Security Certifications & Compliance FrameworksChecked on September 2, 2026. Vendor's own trust page. Claims CREST, SOC 2 Type II, Cyber Essentials Plus and CBEST accreditations, and states alignment with GDPR, CCPA and OWASP best practices. Self-claims only; not used to verify any certification except where corroborated by an independent registry (CREST, s3). No direct statement that NetSPI itself signs a BAA or a GDPR DPA on request.
  8. Customer Stories - NetSPI (index page)Checked on September 2, 2026. Index of named-client case studies, including Microsoft, Trimble, Quantum Health, EAB Global, Chubb, Medtronic, and others.
  9. How NetSPI Helped Microsoft Build Trust in AI Security with a Framework That Delivers ResultsChecked on September 2, 2026
  10. Medtronic works with NetSPI to identify and protect its network perimeterChecked on September 2, 2026
  11. Chubb partners with NetSPI to bring Attack Surface Management (ASM) to its policyholdersChecked on September 2, 2026
  12. Trimble enhances and secures product development with NetSPI PTaaSChecked on September 2, 2026
  13. EAB Global improves attack surface security within 15 seconds using NetSPI Attack Surface Visibility SolutionsChecked on September 2, 2026. Client: EAB Global, higher education services, ~2,000 employees, HQ Washington D.C. Metric: attack-surface questions previously requiring manual checks across 5+ disconnected tools now answered in seconds; identified 20 employees using unauthorized vulnerable VPN software.
  14. Quantum Health: Redefining Benefits Navigation with Proactive Engagement and Cost SavingsChecked on September 2, 2026. Client: Quantum Health, healthcare benefits navigation, ~2,000-3,000 employees. Metric: $700,000 in annual savings (11x ROI) from Detective Controls Testing engagement.

Every field on this profile records which of these sources it came from. The profile was last rebuilt from them on September 2, 2026. A field no source confirms is left empty rather than estimated.

Published by QA Rating

Every fact about a company comes from a listed source. A field without a source stays empty. A certificate counts as confirmed only when a registry, certificate or auditor report backs it; a certificate the company only claims about itself is published separately, under that label. Vendors can request a correction at hello@qa-rating.com. A correction is applied when it comes with a public source. Last checked on September 2, 2026.

Badge for your site

If you work at NetSPI, you can put a badge linking to this profile on your own site. It is free, it is not tied to any tier, and the badges page explains what each badge claims and when it should come down.

NetSPI

  • NetSPI Listed in QA Rating
    <a href="https://qa-rating.com/companies/netspi/">
      <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI listed in QA Rating">
        <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
        <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text>
        <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Listed in QA Rating</text>
      </svg>
    </a>
  • NetSPI Profile checked 2026
    <a href="https://qa-rating.com/companies/netspi/">
      <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI: profile checked 2026 in QA Rating">
        <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
        <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text>
        <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Profile checked 2026</text>
      </svg>
    </a>
  • NetSPI Nearshore for the USA, 2026
    <a href="https://qa-rating.com/companies/netspi/">
      <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI grouped under Nearshore for the USA in QA Rating, 2026">
        <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
        <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text>
        <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Nearshore for the USA, 2026</text>
      </svg>
    </a>
  • NetSPI Security focus, 2026
    <a href="https://qa-rating.com/companies/netspi/">
      <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI grouped under Security focus in QA Rating, 2026">
        <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
        <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text>
        <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Security focus, 2026</text>
      </svg>
    </a>